The portmap or rpcbind service must not be running unless needed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22429	GEN003810	SV-26664r1_rule	ECSC-1	Medium

Description
The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using remote procedure calls (RPCs).

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2014-04-04

Details

Check Text ( C-27696r1_chk )
Check the status of the rpcbind service. # svcs network/rpc/bind If the service is online and is not documented as required, this is a finding.

Fix Text (F-23906r1_fix)
Disable the portmap service. # svcadm disable network/rpc/bind